Thanks for responding. Yes the target host is the same as when I am replaying. We did check to ensure that the target MAC and IP addresses are the same and they are.
We are not using a firewall or an IPS. We are using a "bonded network" and have had a suspicion that the problem may relate to a routing configuration. Any suggestions relative to what we might try? Thanks . -----Original Message----- From: Aaron Turner [mailto:synfina...@gmail.com] Sent: Thursday, February 16, 2012 6:44 PM To: Main forum for tcpreplay Subject: Re: [Tcpreplay-users] tcpreplay multicast data not getting into application tier Did you is the target host when you captured the traffic the same as when you're replaying? If it's different hardware the destination MAC address would be different and if the IP address is different that would be a problem too. Or are you testing through another device like a router, firewall or IPS? On Wed, Feb 15, 2012 at 11:13 AM, Sargrad, Dave <dave.sarg...@saabsensis.com> wrote: > I captured a single packet pcap file as follows: > > > > tcpdump port 34102 -i eth5 -w hello1.pcap -s 0 > > > > > > I subsequently replay this as follows: > > > > sudo tcpreplay --intf1=eth5 hello1.pcap > > > > > > > > The packet shows up in tcpdump: > > > > > > 18:33:58.356808 00:15:17:9e:3f:f0 (oui Unknown) > 01:00:5e:7b:00:00 (oui > Unknown), ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 10, id 0, > offset 0, flags [DF], proto UDP (17), length 96) > > elora.54106 > 224.123.0.0.34102: [udp sum ok] UDP, length 68 > > 0x0000: 4500 0060 0000 4000 0a11 8d62 c0a8 4207 > > 0x0010: e07b 0000 d35a 8536 004c 2e8a 0000 001d > > 0x0020: 0a19 08aa d5d6 aa05 1000 18ff ffff ff0f > > 0x0030: 2000 2800 30eb add3 91d8 2610 0000 0000 > > 0x0040: 1f0a 1908 aad5 d6aa 0510 6618 ffff ffff > > 0x0050: 0f20 0028 0030 ebad d391 d826 1001 2001 > > > > > > But it does not make it into my application. This application has no trouble > picking up the initial packet (the one that was captured into a pcap file). > Indeed the application interface is quite well tested, and can receive > packets through normal channels. It just does not seem to be able to pick up > the tcpreplayed packet. > > > > > > I am new to tcpreplay, but its usage seems quite straightforward. Why does > tcpdump see the replayed packet, but my application does not? > > > > Any help would be appreciated. > > > > Thank you. -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service. http://www.accelacomm.com/jaw/sfnl/114/51521223/ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support - This message is intended only for the addressee and may contain information that is company confidential or privileged. Any technical data in this message may be exported only in accordance with the U.S. International Traffic in Arms Regulations (22 CFR Parts 120-130) or the Export Administration Regulations (15 CFR Parts 730-774). Unauthorized use is strictly prohibited and may be unlawful. If you are not the intended recipient, or the person responsible for delivering to the intended recipient, you should not read, copy, disclose or otherwise use this message. If you have received this email in error, please delete it, and advise the sender immediately. - ------------------------------------------------------------------------------ Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service. http://www.accelacomm.com/jaw/sfnl/114/51521223/ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
